Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08ad7ae1-4bfa-3d1c-96ac-a9e2cea1430c.roa
File:                     08ad7ae1-4bfa-3d1c-96ac-a9e2cea1430c.roa (raw, json)
Hash identifier:          8AoE+XWSUGARnRE4P0lczf/Zle6M1IbGnxXXSvwTluU=
Subject key identifier:   35:37:B8:CB:F6:29:62:7C:4D:08:0B:08:AE:5B:BE:5A:17:7D:9E:77
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F432858473280BA3230F2E39B206CEB60
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08ad7ae1-4bfa-3d1c-96ac-a9e2cea1430c.roa
Signing time:             Fri 13 Sep 2024 05:29:44 +0000
ROA not before:           Fri 13 Sep 2024 05:29:44 +0000
ROA not after:            Thu 12 Dec 2024 06:29:44 +0000
asID:                     16839
IP address blocks:        149.96.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:32:80:ba:32:30:f2:e3:9b:20:6c:eb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Sep 13 05:29:44 2024 GMT
            Not After : Dec 12 06:29:44 2024 GMT
        Subject: CN=14b69254-0fad-406c-9ac6-c68b0d90ad0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a0:10:8f:3d:ac:42:66:09:a8:a0:35:e5:06:
                    3f:6e:cc:fa:0e:f2:0d:15:e8:76:77:7b:9c:a1:90:
                    6d:0c:53:0e:b1:64:38:1f:3d:96:d3:ea:f6:e0:2e:
                    f3:27:29:d7:6d:0b:cb:67:cc:9f:ca:94:98:36:88:
                    3b:11:ad:24:b8:43:be:ee:80:73:bc:14:9a:91:ba:
                    8f:6f:10:19:cf:c3:45:98:69:c4:b2:f9:46:cf:a3:
                    39:6b:f0:6a:88:42:17:66:a7:69:eb:31:21:8d:7d:
                    28:de:06:c8:ef:cf:59:13:24:07:69:a0:74:10:51:
                    0e:27:9d:6a:1b:64:19:0f:09:91:b3:f7:c5:17:e8:
                    9f:b6:7e:20:a8:b3:a2:8f:10:4a:a8:d8:99:c3:18:
                    ba:8a:b7:ba:00:03:40:0d:85:6e:f3:cc:15:37:f4:
                    eb:bd:dc:de:90:23:d9:7f:37:ca:76:c0:0d:0e:f4:
                    63:bd:fc:78:37:12:9f:23:3a:3e:38:91:0f:e7:73:
                    53:17:24:a6:05:a9:02:35:e3:5a:aa:f4:7d:17:a6:
                    a5:4d:6d:31:c9:e4:58:eb:52:9c:0c:dd:62:06:04:
                    10:d8:30:58:ff:47:f6:8f:fc:08:78:75:a7:db:1e:
                    d6:22:50:3d:18:61:01:d1:78:4c:0e:37:a0:76:02:
                    1b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:37:B8:CB:F6:29:62:7C:4D:08:0B:08:AE:5B:BE:5A:17:7D:9E:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08ad7ae1-4bfa-3d1c-96ac-a9e2cea1430c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:ce:0e:63:4d:50:f4:c0:e2:d3:1e:4c:f8:16:f6:6e:05:c9:
         88:a7:13:6f:d7:46:65:b5:ae:e8:aa:ff:da:f4:67:db:5d:69:
         e6:3e:e3:65:c6:4c:52:40:c5:df:fc:a4:78:5c:9e:d6:ed:b9:
         29:1a:56:cf:76:b1:9a:22:eb:76:67:08:11:e8:ea:76:e4:92:
         59:0e:42:43:8d:e6:f4:c7:68:fa:98:15:fc:76:6c:70:4f:00:
         f3:6d:4f:d1:33:49:50:78:04:4e:55:2b:32:29:6c:b6:2b:43:
         62:52:dc:04:25:57:cf:e2:c1:99:f6:1d:0e:f6:1a:75:2f:d6:
         b0:56:5c:0d:c0:f8:a3:6f:58:e3:5b:ac:91:60:92:5f:6e:5b:
         bb:00:fd:93:13:2b:a7:bf:33:43:8c:6c:57:4f:c9:26:b3:f4:
         37:ac:67:32:1f:31:9a:26:4e:15:01:b3:06:95:8f:31:52:c5:
         f8:ca:2c:f8:7f:ec:5b:3c:15:ea:8a:e7:9b:a8:22:0b:29:28:
         95:a1:3c:0e:9d:b5:8d:f1:bc:26:ae:03:8d:ba:31:b2:5c:ad:
         c0:70:ea:46:89:18:33:bb:e6:56:7e:45:aa:23:6c:35:3c:9c:
         de:f3:39:13:0c:6f:80:99:fa:58:80:a5:4b:16:12:30:e1:9c:
         de:fc:61:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcygLoyMPLjmyBs62AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI0MDkxMzA1Mjk0NFoXDTI0MTIxMjA2Mjk0NFowLzEtMCsGA1UEAxMk
MTRiNjkyNTQtMGZhZC00MDZjLTlhYzYtYzY4YjBkOTBhZDBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKAQjz2sQmYJqKA15QY/bsz6DvINFeh2d3uc
oZBtDFMOsWQ4Hz2W0+r24C7zJynXbQvLZ8yfypSYNog7Ea0kuEO+7oBzvBSakbqP
bxAZz8NFmGnEsvlGz6M5a/BqiEIXZqdp6zEhjX0o3gbI789ZEyQHaaB0EFEOJ51q
G2QZDwmRs/fFF+iftn4gqLOijxBKqNiZwxi6ire6AANADYVu88wVN/TrvdzekCPZ
fzfKdsANDvRjvfx4NxKfIzo+OJEP53NTFySmBakCNeNaqvR9F6alTW0xyeRY61Kc
DN1iBgQQ2DBY/0f2j/wIeHWn2x7WIlA9GGEB0XhMDjegdgIb6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDU3uMv2KWJ8TQgLCK5bvloXfZ53MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMDhhZDdhZTEtNGJmYS0z
ZDFjLTk2YWMtYTllMmNlYTE0MzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGTODmNNUPTA4tMeTPgW9m4FyYinE2/XRmW1ruiq/9r0Z9tdaeY+42XG
TFJAxd/8pHhcntbtuSkaVs92sZoi63ZnCBHo6nbkklkOQkON5vTHaPqYFfx2bHBP
APNtT9EzSVB4BE5VKzIpbLYrQ2JS3AQlV8/iwZn2HQ72GnUv1rBWXA3A+KNvWONb
rJFgkl9uW7sA/ZMTK6e/M0OMbFdPySaz9DesZzIfMZomThUBswaVjzFSxfjKLPh/
7Fs8FeqK55uoIgspKJWhPA6dtY3xvCauA426MbJcrcBw6kaJGDO75lZ+RaojbDU8
nN7zORMMb4CZ+liApUsWEjDhnN78Yaw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:50 2024 by rpki-client on console-ams.rpki-client.org